burpsuite-project-parser

Extract security audit findings and proxy history from Burp Suite project files.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill burpsuite-project-parser-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: burpsuite-project-parser
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/burpsuite-project-parser
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill burpsuite-project-parser-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bash, jq, and includes scripts (resource) components.

What problem does it solve?

This skill solves the challenge of manually searching through massive Burp Suite project files, allowing for efficient, automated security analysis without needing to open the heavy GUI for every query.

Core Features & Use Cases

  • Targeted Search: Extract specific security findings, headers, or body content using regex patterns.
  • Resource Efficiency: Safely query large datasets by using sub-component filters and mandatory output truncation to prevent context window overflow.
  • Use Case: Quickly identify all high-severity SQL injection findings across a large engagement or search for specific server signatures in response headers across thousands of captured requests.

Quick Start

Use the burpsuite-project-parser to search for high-severity audit items in your project file by running the script with the auditItems flag.

Frequently Asked Questions about burpsuite-project-parser

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract specific HTTP requests from a Burp Suite project file without using the GUI?

You can extract specific HTTP requests from a Burp Suite project file by running command line scripts that search proxy history and site map data using regex patterns. This allows automated security analysis without opening the heavy GUI.

What is the best way to search for security audit findings across a large Burp Suite project?

The best way to search security audit findings across a large Burp Suite project is using command line scripts with the auditItems flag. This method safely queries large datasets by applying sub-component filters and output truncation to prevent context window overflow.

Do I need Burp Suite Professional to parse project files from the command line?

Yes, you need Burp Suite Professional and the burpsuite-project-file-parser extension installed to parse project files from the command line. The scripts operate on captured HTTP traffic data extracted from these project files.

Can I use regex to filter response headers and body content in captured HTTP traffic?

Yes, you can use regex patterns to filter targeted response headers and body content in captured HTTP traffic. The scripts search through proxy history and site map data to identify vulnerabilities and analyze request-response patterns based on your expressions.

What dependencies are required to run the burpsuite-project-parser scripts?

You need bash and jq installed on your system to run the burpsuite-project-parser scripts. These dependencies are used to execute the command line operations and process the JSON data extracted from the Burp Suite project files.

Why does searching a massive Burp Suite project file cause context window overflow?

Searching a massive Burp Suite project file causes context window overflow when extracting large amounts of HTTP traffic data at once. The parser prevents this by enforcing mandatory output truncation and allowing sub-component filters to safely query large datasets.